Who processes data for us

Dedicated server in Helsinki. All persisted application data. DPA in the customer account, processing only in the EU/EEA.

DNS, TLS termination, and tunnel. Processes IP address and the request in transit. Standard contractual clauses apply if processing happens outside the EU.

Relay for all outbound and inbound mail, including security mail. Send in eu-north-1 (Stockholm), inbound in eu-west-1 (Ireland). Content is then stored on the Helsinki server. AWS DPA in the customer account.

Card and subscription data. Not active until administration turns billing on and keys are present. This page and the purchase terms will be updated then.